The process of granting or denying requests for access to systems, applications and information. Can also refer to the process of granting or denying requests for access to facilities.